- Published
- Source
- Security Affairs
- Filed under
- Attacks, Malware & exploits
- Vulnerabilities
- 1 CVE
Attackers are exploiting SonicWall SMA 1000 vulnerability, tracked as CVE-2026-102255 (CVSS score of 10.0), just days after its public disclosure. Attackers have begun exploiting a critical flaw in SonicWall SMA 1000 appliances, tracked as CVE-2026-102255 (CVSS score of 10.0), just days after public disclosure. The vulnerability is a server-side request forgery (SSRF) flaw that requires…
If you run the affected product
- Find every instance – especially the ones reachable from the internet.
- Apply the vendor's patch or mitigation now: exploited flaws are fixed in days, not at the next patch cycle.
- Then check for signs it was used before you patched: web shells, new accounts, unusual outbound traffic.
More helpCISA's Known Exploited Vulnerabilities catalogue (opens in a new tab)
The vulnerabilities in this story
CVE-2026-102255 in the NVD (opens in a new tab)
- CVSS10.0Critical
- CISA KEVNot listedno confirmed exploitation on CISA’s list (yet)
Exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog (CC0). Exploit prediction: EPSS by FIRST. This product uses the NVD API but is not endorsed or certified by the NVD.
MyCyberWay training
Blue Team Analyst · Vulnerability Management
You can't patch everything at once. Learn what to fix first.
In our Blue Team Analyst programme you run a vulnerability scan, prioritise the output with CVSS, EPSS and asset criticality, and track remediation to closure with the teams who own the fix.
- Read scanner output properly
- Prioritise with CVSS, EPSS and asset criticality
- Track remediation to closure
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
